Comment by trollied

https://gdpr.eu/email-encryption/

On email: "While encryption is not required, it is up to every organization to develop a rationale for developing the most appropriate data security practices."

You should probably apologise for being wrong.